Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa
File:                     ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa (raw, json)
Hash identifier:          jwSn8DUruK43a6Si4JinaTtjYJfDRnPpWzKJTayIDTs=
Subject key identifier:   A6:59:28:35:01:2D:34:DD:3A:5A:E3:66:4A:E6:AA:AB:0B:8F:77:08
Certificate issuer:       /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef
Certificate serial:       010D0C9F4328584E4AEF44BA23A3FBC0A41D47E0
Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     62642
IP address blocks:        172.82.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:44:ba:23:a3:fb:c0:a4:1d:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=ef8aaa1d-8a46-4642-aee3-9430a1930267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:ee:1d:29:47:3b:74:6f:55:a0:5b:4e:25:
                    0f:25:2d:d9:a5:38:ad:96:45:9d:e2:84:5a:6e:c7:
                    03:8b:76:cb:ad:90:f8:da:30:aa:dc:30:77:2c:c7:
                    8b:e6:aa:54:bd:71:dd:bf:b6:a7:7b:73:3a:f6:f8:
                    56:4d:12:6a:df:ec:0f:2d:84:9e:8f:27:2e:91:90:
                    98:4e:c5:53:86:e4:d5:54:46:37:10:6c:e3:7b:0b:
                    18:f7:85:f0:19:20:e7:8f:37:4d:4a:26:ff:c8:68:
                    41:aa:9b:94:a9:ec:68:62:fe:ef:6d:22:cd:bd:ec:
                    e5:1e:57:e6:18:e8:17:c0:7f:db:f6:68:21:4e:6e:
                    6e:68:f5:d7:13:f7:5a:78:8c:7c:93:0a:ee:f4:79:
                    eb:98:39:0a:6e:a0:fc:cc:4c:77:7e:cc:b9:d7:b9:
                    e9:ab:93:5d:82:77:a6:35:59:c4:85:41:b7:00:52:
                    d1:b5:d3:b3:3d:25:28:cf:85:74:52:a9:05:de:30:
                    19:d5:e2:c0:d9:2a:10:ce:e2:60:dc:ad:9e:8f:7e:
                    54:3d:a4:a5:f9:1b:c8:9c:a6:fa:21:bb:c8:42:e6:
                    27:39:e8:b2:95:9a:a8:af:db:7e:bb:9f:ba:0c:ef:
                    19:85:5a:36:d9:c8:31:2f:50:ce:1b:d6:cb:d7:de:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:59:28:35:01:2D:34:DD:3A:5A:E3:66:4A:E6:AA:AB:0B:8F:77:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl

            X509v3 Authority Key Identifier:
                keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:5b:39:20:c4:3c:ad:c3:2f:77:82:bc:7e:fd:43:24:4c:
         99:95:07:78:d1:6e:82:3a:9e:d3:51:99:f8:32:c5:84:8d:0e:
         6a:43:01:d9:e9:fe:c9:0c:68:38:da:1c:42:7a:ff:f8:2e:71:
         23:cc:1d:78:fc:c0:f3:15:7a:b1:a2:76:f4:c3:fb:6e:d0:f1:
         6c:c9:dd:9d:c1:66:df:df:c1:a2:8a:5e:74:af:cf:0f:84:d1:
         75:eb:95:84:74:46:bd:f6:e6:23:0a:32:4f:3a:aa:fb:f4:df:
         9b:71:20:29:8c:31:29:4f:3f:a4:28:f3:58:ba:29:13:7d:a5:
         e7:5d:0b:4d:08:6c:83:d8:cf:10:1b:4b:e3:11:10:ef:cd:7a:
         be:b2:5e:47:c3:a4:35:19:d5:1e:a5:02:06:bc:dc:8f:b3:4c:
         2e:dd:3d:05:77:d5:ac:01:89:21:61:e1:e1:7a:06:a7:22:9a:
         8b:b0:0d:42:79:de:9b:eb:b2:32:0b:27:81:8c:0d:da:12:ef:
         1c:ec:91:21:52:43:b6:32:a6:de:1a:29:4d:c9:07:c9:4b:4d:
         5a:b7:d3:ec:59:c8:8c:6c:c5:df:6d:75:19:d6:1b:b7:6c:8b:
         fc:ae:a0:e2:8b:0d:2c:ac:a1:b5:2e:f5:f7:e9:4e:b3:ed:b8:
         01:c3:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:50:37 2026 by rpki-client